This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft File: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft (raw, json) Hash identifier: ACDKJJxb52ynBVpdjeVzOt1EYVdYBo278BMxaHBd8yU= Subject key identifier: A1:0B:7B:29:9C:79:06:73:90:0F:9F:3D:7B:91:81:A5:B5:6B:74:F8 Authority key identifier: 06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E Certificate issuer: /CN=A91E1CB1/serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft Manifest number: 9A Signing time: Tue 09 Dec 2025 04:19:41 +0000 Manifest this update: Tue 09 Dec 2025 04:19:41 +0000 Manifest next update: Tue 16 Dec 2025 04:19:41 +0000 Files and hashes: 1: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl (hash: DY0uPqrgRCVQJfiRyZra8+WNxraQCgqsIDNNvKPlc8c=) 2: 8291E388EA0811EFB385192AC4F9AE02.roa (hash: Ca2pEWIV/EJ5w4q8uyfY/09SxRF8GtoaKpWxctigiRA=) 3: 8322D244EA0811EFB385192AC4F9AE02.roa (hash: oTDfgY49fmT+y8+2GJaPDtK7EdeEE+LjLlZzrGykmgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 04:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1CB1, serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Validity Not Before: Dec 9 04:19:41 2025 GMT Not After : Dec 16 04:19:41 2025 GMT Subject: CN=6937a35d-a8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:aa:ff:51:6e:87:4d:98:38:d4:8e:c3:be: f2:97:69:bb:c8:dd:46:9f:f5:46:f6:1e:2b:e7:5f: 63:19:c0:e9:d9:76:3a:9f:d5:02:61:f5:7d:d5:63: 12:8c:f6:79:89:a1:79:ab:a0:96:99:4b:d5:fa:b6: 4c:71:21:18:11:68:80:82:f4:6f:4e:45:d7:5d:e2: 22:23:2d:92:82:fc:74:32:92:ac:5c:6f:59:76:a7: a9:49:bf:68:28:bc:73:d7:3c:c2:bf:8a:6e:9e:b6: 96:37:48:27:62:94:d9:7e:45:4d:ad:22:b5:41:17: 99:3b:2a:10:51:2a:37:02:7d:f3:75:9b:0c:4c:39: 25:e0:07:7f:f1:e5:8e:b4:41:ef:3b:a8:41:61:c8: 22:22:bb:21:98:ae:df:d8:2a:3b:22:4a:d8:f9:e3: ab:cf:90:97:d5:61:a1:cf:c6:29:3b:b2:04:5f:88: 4f:f2:1c:cc:b0:35:a0:b7:a5:7d:0a:f1:70:01:b9: 99:aa:45:4a:5c:be:20:3f:1e:37:c8:35:fc:c1:86: 01:9f:4f:e3:57:19:c1:f2:01:94:a8:5b:6a:42:a2: 71:b7:18:c4:f6:5e:8e:c7:92:eb:86:8d:a1:88:fb: dd:1b:d3:a9:d3:ca:b5:46:f4:8c:b1:f4:b5:cb:8f: 72:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0B:7B:29:9C:79:06:73:90:0F:9F:3D:7B:91:81:A5:B5:6B:74:F8 X509v3 Authority Key Identifier: keyid:06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:14:c3:af:76:57:f1:12:2b:01:6a:e4:7c:86:ef:f5:90:0c: a4:34:05:94:66:4a:1c:30:28:a2:7f:b5:af:dc:ef:58:a1:13: 8f:b2:f1:dc:e5:94:b8:09:14:49:d4:d0:f4:da:70:72:7a:c9: b9:9c:97:cb:3f:fa:77:96:7e:23:99:a0:7e:35:25:1e:9c:26: 92:67:a5:7a:1d:c0:b4:2c:d5:52:90:b5:3c:4a:13:a7:e6:20: 8e:b3:cb:8e:74:f4:01:06:c1:66:c6:21:59:1c:fc:08:a7:42: 0b:81:5e:e6:97:88:9b:9e:e9:3c:5c:3d:22:cd:3c:3d:3a:b4: 33:ff:15:3f:f6:f9:cb:73:ee:4f:e1:88:fa:42:fa:ff:1c:88: 77:ad:d5:81:2f:12:8c:64:12:84:37:aa:34:a8:44:64:f6:a5: 53:5e:2e:18:1d:36:e9:46:d3:85:4c:8d:3b:83:ca:b3:34:44: f5:b4:9f:3c:e6:7b:8c:50:24:3a:f1:9a:4e:1a:8a:b1:51:9c: 71:38:f6:e3:60:66:25:dc:ad:d7:4e:c2:59:f0:bc:5b:09:c4: de:02:b8:22:0b:cf:03:61:ef:26:94:0d:48:76:b3:e6:3b:48: 18:44:7b:56:a7:1e:ac:73:12:16:50:22:84:d9:2c:97:17:44: 40:ad:df:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDQjExMTAvBgNVBAUTKDA2M0UwMTI3NDcyQTdFMkE2Rjg0NzA0MDlDOUI4MjM5 MDVGQUZFOEUwHhcNMjUxMjA5MDQxOTQxWhcNMjUxMjE2MDQxOTQxWjAYMRYwFAYD VQQDEw02OTM3YTM1ZC1hOGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKiq/1Fuh02YONSOw77yl2m7yN1Gn/VG9h4r519jGcDp2XY6n9UCYfV91WMS jPZ5iaF5q6CWmUvV+rZMcSEYEWiAgvRvTkXXXeIiIy2Sgvx0MpKsXG9ZdqepSb9o KLxz1zzCv4punraWN0gnYpTZfkVNrSK1QReZOyoQUSo3An3zdZsMTDkl4Ad/8eWO tEHvO6hBYcgiIrshmK7f2Co7IkrY+eOrz5CX1WGhz8YpO7IEX4hP8hzMsDWgt6V9 CvFwAbmZqkVKXL4gPx43yDX8wYYBn0/jVxnB8gGUqFtqQqJxtxjE9l6Ox5Lrho2h iPvdG9Op08q1RvSMsfS1y49yowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKELeymc eQZzkA+fPXuRgaW1a3T4MB8GA1UdIwQYMBaAFAY+ASdHKn4qb4RwQJybgjkF+v6O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUNCMS8zRjRBNUEyRUVB MDgxMUVGOUQzMzlCMjlDNEY5QUUwMi9CajRCSjBjcWZpcHZoSEJBbkp1Q09RWDZf bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqNEJKMGNxZmlwdmhIQkFuSnVDT1FYNl9vNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUNCMS8zRjRBNUEyRUVBMDgxMUVGOUQzMzlCMjlDNEY5QUUwMi9CajRCSjBjcWZp cHZoSEJBbkp1Q09RWDZfbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTFMOvdlfxEisBauR8hu/1kAykNAWUZkocMCiif7Wv3O9YoROPsvHc 5ZS4CRRJ1ND02nByesm5nJfLP/p3ln4jmaB+NSUenCaSZ6V6HcC0LNVSkLU8ShOn 5iCOs8uOdPQBBsFmxiFZHPwIp0ILgV7ml4ibnuk8XD0izTw9OrQz/xU/9vnLc+5P 4Yj6Qvr/HIh3rdWBLxKMZBKEN6o0qERk9qVTXi4YHTbpRtOFTI07g8qzNET1tJ88 5nuMUCQ68ZpOGoqxUZxxOPbjYGYl3K3XTsJZ8LxbCcTeArgiC88DYe8mlA1IdrPm O0gYRHtWpx6scxIWUCKE2SyXF0RArd/d -----END CERTIFICATE-----Generated at Fri Dec 12 01:27:11 2025 by rpki-client